Please look at reassemble.c
this file contains support functions for many different types of packet
reassembly.
Also look at packet-tcp.c which supports reassembly of tcp streams.
Please describe what kind of reassembly you want to do, is it more similar
to say ip fragment reassembly or is it
reassembly of a protocol running ontop of tcp?
The source to ethereal contains numerous examples of both types of
reassembly.
For example packet-ip.c is an example of ip-fragment and similar fragment
reassembly
while packet-ldap.c or packet-diameter.c provides examples on how tcp
streams can be reassembled.
best regards
ronnie sahlberg
----- Original Message -----
From: Hans Viens
To: ethereal-dev@xxxxxxxxxxxx
Sent: Thursday, May 22, 2003 10:29 PM
Subject: [Ethereal-dev] Re-assemble Data
Hi all,
I developped a dissector for Ethereal and I need to re-assemble data from
different packet. I tried to concatenate those data as the packet are
decoded, however, since Ethereal decode each time we selected a packet, this
give me wrong values.
For example,
Packet 1: 0x99
Packet 2: 0x89
Packet 3: 0x79
Packet 4: 0x69
I need on packet 5 to show the overall data: 0x99, 0x89, 0x79, 0x69
but if I overview packets 1,2,3,4,3,2,1 (by clicking on it) I will have the
following results on packet 5: 0x99, 0x89, 0x79, 0x69, 0x79, 0x89, 0x99
Any idea ?
Thanks,
Hans
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev
